301f99b7661e721d78031318847c7d74_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

301f99b7661e721d78031318847c7d74_JaffaCakes118
Size

34KB
MD5

301f99b7661e721d78031318847c7d74
SHA1

bddb61127b70b207c9189bb8b06d5ec856505ee2
SHA256

15128c91b5382bd84db8c3a9de15aaf1f3631d8d5c16f82c0107e3c6a12944f2
SHA512

ea42c9440efef6b37cdb8f8c1352227df5ad68b04e20309724046171c3f1c1553037602aea8240766cabe5665f25adcab8fd3d20ee2dc4dc628ea3c7096f782a
SSDEEP

768:rewM5S6RJ8Ye1MgzMXoqKb8aSbp9MURhnVIpJKZa:jMfeDzMX/Kb8aAIwh+pkZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
301f99b7661e721d78031318847c7d74_JaffaCakes118

Files

301f99b7661e721d78031318847c7d74_JaffaCakes118
.dll windows:5 windows x86 arch:x86

6cffdb8e7ad8c4be09ae2d0b1ee32146

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceLanguagesA
ExitProcess
FlushFileBuffers
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetVersion
HeapAlloc
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcpyA

msvcrt

__p__commode
__set_app_type
_cexit
exit
free
isdigit
__getmainargs

ole32

CLSIDFromString
CoCreateGuid
CoCreateInstance
CoGetMalloc
CoGetObject
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ